Software Engineer (iOS)
Job Description
Thales CDI (Cyber-Security Products) is hiring a Mobile Engineer (iOS) to build IAM (Identity & Access Management) mobile apps and SDKs. You will help deliver secure, easy-to-integrate authentication experiences where security is non-negotiable.
You will work in a small, high-impact team and use AI responsibly to accelerate delivery—while applying strong engineering judgment and human-led security review in a security-critical environment.
Responsibilities:
Design, build and validate mobile apps and SDKs; use AI-assisted tooling to accelerate delivery with mandatory human-led security review.
Implement secure authentication and identity verification flows (protocol-driven); validate designs against platform threat models.
Own test strategy for SDKs (unit/integration/UI); use AI to expand coverage while rigorously testing security-critical paths.
Design clean, well-documented SDK APIs with backward compatibility and minimal binary-size impact.
Improve the SDLC with pragmatic AI adoption (test generation, review support, debugging and release automation).
Maintain CI/CD (e.g., Jenkins, GitLab CI) with SAST, dependency scanning and automated security checks; use AI to triage and accelerate remediation.
Evaluate AI/ML tools and recommend adoption aligned to IAM security and data-handling standards; share best practices.
Add privacy-conscious telemetry (crash/performance/diagnostics) to support customers without exposing sensitive identity data.
Contribute to product innovation (prototypes/patents), including AI/ML opportunities that improve security and reduce user friction.
Requirements:
Degree in Computer Engineering, Information Security, Electronics or related field.
5+ years of professional mobile development experience.
iOS (Swift, SwiftUI/UIKit) expertise, including lifecycle, concurrency and memory management.
AI-assisted development (e.g., Copilot/Claude/Cursor); able to prompt effectively and critically validate/rewrite output for security-sensitive code.
Ability to apply AI across the SDLC (tests/docs/debug/review) with strong quality and security judgment.
Experience building and distributing mobile SDKs (API design, versioning, binary distribution, backward compatibility).
Familiar with mobile security practices/tools: static analysis, secure storage (Keychain/Keystore), certificate pinning and reverse-engineering countermeasures.
Advantage: IAM and auth protocols (OAuth 2.0, OIDC, FIDO2, certificate-based authentication).
Self-directed, collaborative engineer with strong trade-off judgment.
Other Information:
Working Location: One North
Working Hours: Monday - Friday, 9am - 6pm